Add tests for auth for each endpoint