sessions controller tests #37