FIX: test authorization session