add testing for auth and forget