session filter spec with admin