testing authorization
tested for user autorization

very extensive test. Covers all cases