Tests: disable ActiveRecord support; add simple application_controller session test on login/password login