add tests for login/logout