add todo, start cleaning up specs
require follows to occur
simplify login asserts