over testing to confirm it takes both user and email. if we care that much we should move to unit. too expensive to test here. but regardless… not a big deal, so not worth testing. just a convenience. THAT login works IS important, though.