auth tests passing
basic - may need tweaking
header link & neater find