Session out of service layer; users created in tests as needed

See if you can't use the admin service for this (because you've already included it in the controller test).