authentications controller testing