fix index action test for unauthorized user