added rspec test for sessions controller