test without authentication