auth testing part 2