Testing for Missing Authentication for Critical Function