170 state apiserver testing drop unused field

Arguably `LoggedIn` was supposed to mean _this authoriser has authenticated an entity_ but it doesn't actually do anything.

Each `state/apiserver/...` test diligently sets the `LoggedIn` field which has no effect on the `FakeAuthoriser` nor is its state checked by any tests.