add authorization related test