add more auth-tests