a lot more work on e2e tests for authenticationRequests