[FIX] In testing there is an extra verification that we have session truly stored in database
[IMPROVEMENT] In controller tests there is access to a session object