you can use token based auth now, and there are tests