I'd do one test suite for testing login (and that the data is protected if user's not logged in), and have `login false` in rest of test cases.