testing failing auth without encryption