some auth tests