Applied session security; updated unit test to check for session variables