refactored Dons sandbox with new auth test