add set('securedByLoginURLPattern', '/members/.*') to app_test