finished authorization tests