testing auth without adminCheck