removed auth_token from constructed url; some fixes in tests