test(auth): add test suite for auth