changed type of session attributes, covered httpService with unit tests