added tests for @authorization()