add all authorization tests