working on authorization testing