added tests on authentication