Forgot to update testing code - now accepts authenticated user