tests: set session.save_path in bootstrap

To ensure sessions will not be placed in system directory, even accidentally.