sessions login test actually working