add tests for login attacks
redirect to profile page after login