fixed test to make sure unauthorized users cannot create new items or see the page