Session out of service layer; users created in tests as needed

Not sure that we can't use adminUserService for this as well.