these tests only test the client side api.

There will probably be other tests needed once the api is finalized, example, the isAuthenticated issue Matthias found