Session out of service layer; users created in tests as needed