removed Api::authorize from tests