auth tests pass: