test rest.isAuthorized()