added ST tests, got the first green on the happy path
more ST tests to cover the authentication ticket and the failure case