test /session/ GET
test /session/ DELETE