split up and expand account integration test
require token when updating user via API
require token when logging out via API