reauth: slightly improved testing