add test for null byte in session data