sessions controller testing passed