another test for login requiring introduction of UserService