adding authorisation and find by id
adding back in tests that required  operator