fixed authorization tests