user and session testing