test authFlow