Add tests around session controller redirects

Test that the redirects are working correctly for various states of signed-in-ness.