started auth testing
too much stuff