auth tests passing