This tests login lookup, password verification, and session assignment. It does not modify the database.