note to delete private test file if not authed