* asserting content of response in specs that return 200's

* implemented specs for sessions#show_current_user