more tests added, fleshing out users/sessions