more session controller specs