controller tests (user, session, video)