tests for authentication