session controller tested