use Test::PlugAuth interface
add a skip_auth test so that we can refactor it