passing tests after adding authorization