Missing tests for auth.go (see #2)