addtional test coverage, updated auth to return a promise