Fix SessionsController's specs

The specs were auto-generated, and not suited for testing a devise controller. They have been improved to call the actions with the proper HTTP method and parameters, but the result gets not checked properly yet.