improve project auth testing
move botgroup testing to client level