add logic for testing auth