anchor.diff:  [source,java]
   ----
   mvc
  -    .perform(formLogin())
  -    .andExpect(authenticated());
  +	.perform(formLogin())
  +	.andExpect(authenticated());
   ----
   
   If we wanted to assert the roles of the user, we could refine our previous code as shown below:
  
positive.code: [source,java]
  ----
  mvc
      .perform(formLogin("/auth").user("a","admin").password("p","pass"))
  ----
  
  [[test-logout]]
  
negative.code: ----
  @Test(expected = AuthenticationCredentialsNotFoundException.class)
  public void getMessageUnauthenticated() {
  	messageService.getMessage();
  }
  ----
  
  