authentication tests passing