fix bug found while testing where role is static
fix up all test data, ensure things pass without auth