TST: add test for web_auth.