update specs for sessions controller