Add initial tests for authorization