add auth tests exercise 9.6.3
add a _fields partial and update the test