adding spec for login and logout