basic uas and uac testing with sessions