added tests for unauthorised access to hourly rates