testing the sessions controller.