It still shouldn't even be possible to deploy without some basic sanity tests. I'd put authentication very high on that list.