more tests for authentication things
[#5]