basic auth tests pass