Session sets additional headers properly in specs