sug-133 tests for authorization without token