add logged-in scenarios to ./features/event_expire_url.feature