Add controller tests for authentication