testing authentication feature