def test_should_logout
    login_as :quentin
    get :logout
    assert_nil session[:user]
    assert_response :redirect
  end

  def test_should_remember_me
    post :login, :user => { :login => 'quentin', :password => 'test', :remember_me => "1" }
    assert_not_nil @response.cookies["auth_token"]
  end

  def test_should_not_remember_me
    post :login, :user => { :login => 'quentin', :password => 'test', :remember_me => "0" }
    assert_nil @response.cookies["auth_token"]
  end

  def test_should_delete_token_on_logout
    login_as :quentin
    get :logout
    assert_equal @response.cookies["auth_token"], []
  end

  def test_should_login_with_cookie
    users(:quentin).remember_me
    @request.cookies["auth_token"] = cookie_for(:quentin)
    get :index
    assert @controller.send(:logged_in?)
  end

  def test_should_fail_expired_cookie_login
    users(:quentin).remember_me
    users(:quentin).update_attribute :remember_token_expires_at, 5.minutes.ago
    @request.cookies["auth_token"] = cookie_for(:quentin)
    get :index
    assert !@controller.send(:logged_in?)
  end

  def test_should_fail_cookie_login
    users(:quentin).remember_me
    @request.cookies["auth_token"] = auth_token('invalid_auth_token')
    get :index
    assert !@controller.send(:logged_in?)
  end

  #these test the reset_password method
  def test_reset_password_should_accept_code_as_id
    get :reset_password, :id => 'imapasswordcode'
    assert_redirected_to :action => :reset_change_password
    post :reset_password, :password_reset_code => 'imapasswordcode'
    assert_redirected_to :action => :reset_change_password
  end

  def test_reset_create_password
    post :reset_create_password, :user => { :password_reset_code => 'imapasswordcode', :password => 'newpassword', :password_confirmation => 'newpassword' }
    assert_equal 'newpassword', assigns(:current_user).password
    new_saved_password = assigns(:current_user).crypted_password
    assert User.find_by_crypted_password( new_saved_password )
    assert_equal "Password reset", flash[:notice]
  end