DRYed sessions controller spec