auth path with test button