Now we dont rely on the document reference anymore.
  Invoke generateCertificate on tests else the user isnt valid.
  Note:  Login name returns the Certificate Login reference, to keep
    backward compatibility with the API (and current usage) it user
    the actual user reference, so it is easier to identify which document
    set the access status.