it always seemed weird to me to have such an elaborate login fake. It seems like we should just be able to mock out a call to ``login()`` somehow.