Add more tests for authentication. More implmentation of access_level