working through auth_endpoint_test