fixed session spec so it uses new_session_path