implement the missing tests - Session::impersonate - ::hasPermissions when not having permissions - ::checkPermissions when not having permissions - Test GuestCredentials