extend test suite to check for authentication denial when