testing the icebreaker authorization logic