tests for authorization prompt