Added session test to check not validated with no session.

Added a test to check if the session is rejected if an invalid session
is provided (in this case none).