session service, all tests passing