stub out authentication in the controller tests