fix test case to use auth