@dblock Add test for logout if calling logout deletes req.user

We had a test for https://github.com/artsy/artsy-passport/pull/30 it just stubbed `req.logout` incorrectly