test logins but session handling problem with logout