added tests for requiring login