rewrite to avoid setting any real data in session tests