Updated tests for steps to be more picky on who is logged in and use the nested routes