Rename controller_test to controller_spec

So it is picked up in rspec runs.
Session should only authenticate once

Only try to authenticate if it has not yet tried.

Fix #12
pre-release version bump, 1.2.5.pre