call setLoggedOut instead of returning it as obj
fixes checkLogin test

- change httpBackend expectations to when calls where it mattered
- made sure only relevant expectations where made