add test for incompatible authentication mechanisms