authentication bug fixes
another auth tests