pub fn session_for_user(user: &TestUser) -> Session
Sign a user into a fresh session (helper for session strategy tests).