differently for logged in and logged out people:
Wonderfully, its not documented in the api documentation as
expect, but instead is buried in a manual under the unhelpful title
“Testing Your Controllers: An Anatomy Lesson”.
Thanks for the tips and links Eric. I’ll take a look.