adding tests for authorization