add more testing for auth middleware
3 files changed