Update sessions_controller_spec to include invalid inputs