testing authentication in confirmation emails