add more edge cases to the action finish auth/validation test