authentication testable for graph api