upgrade auth validator with tests