making authorization tests pass