test authenticated hits