auth & tests