more auth tests