added auth, cleaned up broken test
change_password working, test passing