validation/authentication tests