ticket:5 authorization tests