full auth tests