fake auth method
Slightly better than no test at all