edited/added test cases to improve coverage
removed a TODO

Parameters not expected to be null and even if they are, no damage is
expected.
defense against null parameter

assertion to check for null parameter
add test cases for updateSession
improved validation checks in IFESA

now, even if malicious text comes via graceperiod/timezone, they will be
ignored
more thorough checks of parameter values