working devise auth with custom session controller and specs [#2]