update tests for authorization