some regression tests for api key auth