form authentication and tests