started writing auth tests