corrected test to include authentication