wrongly used the Authentication model for testing the login state