add tests for login and authentication