'Verify the endpoint supports session authentication, and only allows authorization for staff users.'

def test_session_auth(self):

    user = UserFactory(password=self.password, is_staff=False)
    self.client.login(username=user.username, password=self.password)
    response = self.client.get(self.path)
    self.assertEqual(response.status_code, 403)
    user.is_staff = True
    user.save()
    response = self.client.get(self.path)
    self.assertEqual(response.status_code, 200)
