add authentication tests.