added test for auth