add test auth-protected method