test redirect after logout
further isolate middleware tests