    def test_logout_get(self):
        login_code = LoginCode.objects.create(user=self.user, code='foobar')

        self.client.login(username=self.user.username, code=login_code.code)

        response = self.client.post('/accounts/logout/?next=/accounts/login/')

        self.assertEqual(response.status_code, 302)
        self.assertEqual(response['Location'], '/accounts/login/')
        self.assertTrue(response.wsgi_request.user.is_anonymous)
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.