adding tests for signed out user during request