add authenticated as an allowed field in the api field, and remove policy_grade from the testing data