auth round 1
created all api tests.  tests working.