add tests to check authentication etc.