Add sessions_controller_spec and test sessions_controller