tests against ext auth uid and recovery auth