Test session endpoint when the user is not admin.