Feature: Authentication

  Scenario: Unauthenticated request to protected endpoint
    When I send a GET request to "/users"
    Then the response status should be 403

  Scenario: Login and get session
    Given I login as "admin@perauset.org"
    When I send a GET request to "/api/auth/get-session"
    Then the response status should be 200