can login
improve login and out tests and extract user creation to module