test(auth): authenticator