6.3.2 - enable auth on /api/push and add tests