add authentication tests