> I don't understand =) . Do you mean testing for the flash message in successful create case?

I only meant not to have a separate test (see the following example) only for the flash message

> where should I check how to see if the user is not logged in? So stubbing current_user as nil doesn't suffice or do I get something wrong?

Sorry, I didn't mean the stubbing bit as part of the test-setup. You want to test if a login with unknown credentials fails, right? So might as well check if the session doesn't include a user_id / the auth_token is not set.

To complete the scenario, there should be a test case for a user that does exists, but fails to authenticate with wrong credentials.

Aaaand: The expectation in line 79 can be included in this example again. See above: no need to define another example just for a flash message (too noisy).