add test to sessions_controller