auth strategy not required for logout + tests