Move specs into controller spec and write new integration test for sessions