add tests for authentication