test RequireAuthc with no auth token