Identity tests: login, logout, force issuer, unverified email