Session out of service layer; users created in tests as needed

Revisit this: is this really true? Clean up if necessary.