added auth test cases for authenticated routes