More tdd on auth. Closer.