sessions controller tests