added sessions controller spec