Auth handler && tests