authorization and tests