added some auth tests and got them passing