update tests
nicer authorization error messages