updated sessions controller spec