I'm not getting this bit -- why are we only stubbing out `login` once the connection is made?