def test_form_valid_does_not_update_session_without_permission(self):
        client = Client()
        client.post(
            reverse('login'),
            {'username': 'staffuser@razzmatazz.local', 'password': 'moo'}
        )
        session = client.session
        self.assertNotIn('impersonate_id', session)
        client.post(
            reverse('become_user', kwargs={'user_uuid': self.normal_user.uuid}),
            {'user_to_become': self.normal_user.pk}
        )
        session = client.session
        self.assertNotIn('impersonate_id', session)
form_valid should only update the session if user has permission.
dataset/ETHPy150Open ofa/connect/open_connect/accounts/tests/test_views.py/BecomeUserViewTest.test_form_valid_does_not_update_session_without_permission