completed js-test, but not tested; partial implementation of auth module