tests for logged-in state