test authentication api