test for authenticated resource