CLC-4140, add SessionsController tests

First pass on SessionsController tests. More coming prior to resolution of CLC-4140 
We like to write the 'it' statements so they read grammatically -- so for example change this one to 

```
it 'logs the user out when ...' do 
```