Add more authorization tests. Code coverage is at 70%.