Added auth to test controller