authentication now has tests behind it