added testing suite (chai and mocha), auth works PROPERLY