rewrite login feature to rspec