more tests for authentication