Add test for authorization