test coverage for authentication routes