add a 401 test to app_test