test api.authentication