fix test to assume existing authorization token