test app controller listen on notauthenticated