auth stuff for tests