add auth integration tests and settings controller