some more apikey tests
adding some authorization tests