Testing authenticated requests