test authorization.