testing: authentication from scratch