Rename Tests to test.
Update session handling: delete session cookie when destroying, be more strict about states.