more authentication tests