expanded login/logout testing to be more thorough

Included testing for making sure cookie is set and session is created
on login, and session is deleted on logout.