don't gitignore tests
add test for disabled auth