use /login instead of /sessions/new and test successful login