wrote and passing tests for SessionsController