add some broken tests for auth