clean up makeAuthorizedRequest & test