corr: bf auth test