We don't need the isAuthenticated() function in accessrights. We only access req.isAuthenticated on logout, so there is usually no need to stub it in tests.