testing without immediate auth