better session specs (not yet checking for actual session).