covering user_session_spec