unit tests for SessionSecurity class