ticket:5 added test for authorization