local auth, tests