Functional testing for the unauthorized part of the app