add test for unsigned Authentication API