more auth: SSO tests