unit testing AuthCtrl