We only want to have tests to cover the most important bits (happy path tests). For auth, I think:

• login
• logout

and maybe check user roles if there is enough time to do it.