add test for bulk with mixed operations under auth