Added tests to ensure authorization is required