added tests for Controller::login()