authorization tests
refactoring authorization tests
almost finish authorization tests