auth tests fixed. Closes #27 and #28