testing some auth cases