Fix session in a few controller specs