testing authorizer