2 auth tests, more pending