Rewrite SessionsController specs for strong params