implemented authorization test; Closes #23