rename ring.util.response in :refer
improve session tests
remove threading macro from login; use assoc-in