more robust expectations for sign in out