// Path: jflask/src/main/java/net/jflask/CustomResponse.java
// public interface CustomResponse {
//   CustomResponse INSTANCE = new CustomResponse() {};
// }


import net.jflask.CustomResponse;
import net.jflask.LoginNotRequired;
import net.jflask.Route;
import org.junit.Assert;
import org.junit.Test;
package net.jflask.test;


/**
 * Try to reproduce bug where failed login does not prevent user from
 * accessing restricted pages. Turns out the browser (chrome) had several
 * duplicates of the session cookie and deleting one on logout was not enough
 * to disable the session (should be fixed now that cookie is set with a path).
 *
 * @author pcdv
 */
public class LoginTest5 extends AbstractAppTest {

  @LoginNotRequired
  @Route(value = "/auth/login", method = "POST")
// Path: jflask/src/main/java/net/jflask/CustomResponse.java
// public interface CustomResponse {
//   CustomResponse INSTANCE = new CustomResponse() {};
// }


// Path: jflask/src/test/java/net/jflask/test/LoginTest5.java
import net.jflask.CustomResponse;
import net.jflask.LoginNotRequired;
import net.jflask.Route;
import org.junit.Assert;
import org.junit.Test;

package net.jflask.test;


/**
 * Try to reproduce bug where failed login does not prevent user from
 * accessing restricted pages. Turns out the browser (chrome) had several
 * duplicates of the session cookie and deleting one on logout was not enough
 * to disable the session (should be fixed now that cookie is set with a path).
 *
 * @author pcdv
 */
public class LoginTest5 extends AbstractAppTest {

  @LoginNotRequired
  @Route(value = "/auth/login", method = "POST")
  public CustomResponse login() {