index and destroy auth tests