tested logout function in sessions spec