test auth route + logout