auth.js pass tests