added authentication methods and test for checking the allow method