more auth-tests