test(auth): add logout test