wip: test api.authentication