more tests for PolyAuth