moved authentication tests where they logically belong