added several functional tests to cover the authentication logic, no pun intended(authlogic) also the whole suite is now passing, admin sessions are left before moving on to next parts of the app