add: tests for session API
add: session controller