Add specs for sessions controller