session controller specs