auth then fallback tests