test for unauthorized access
add 1 more test