The unit tests are really lacking and are absolutely needed. Especially for authentication and permissions.