Add tests for the authorization server