mock login and logout responses