full test coverage of authentiacation of views and endpoints