draft_controller auth tests