added specs for logged in vs not logged in users