more test cases for authentication/authorization added