tests: add req.session.save() test