added anon-client bad authentication test, additional validation, fixed project for image resource