added tests for /authorize endpoint.