some more tests for basic auth