preemptive auth, fixed content types and tests