added auth verification using AuthHelpers
tests updated to use the new pattern for the token