switch to token base authentication and everything works now and the
tests pass correctly.  hooray :)