added header login test and invalid header login tests