adds auth fail test