passing initial authorization tests and logging in