add 2 tests for login required pages

Ensure that routes CANNOT be accessed when NOT logged in. Ensure that
routes CAN be accessed when logged in.