Add tests on authentication lockout