diff --git a/common.js b/common.js
index c3aa393..09b1651 100644
--- a/common.js
+++ b/common.js
@@ -8,7 +8,7 @@ var debug = require('debug')('e2e:common'),
 
 exports = module.exports = {
     TESTAPP_ID: 'io.cloudron.testapp',
-    TESTAPP_VERSION : '5.0.0',
+    TESTAPP_VERSION : '6.0.0',
 
     cloudronDomain: cloudronDomain,
     verifyResponse: verifyResponse,
diff --git a/test/app-flow-test.js b/test/app-flow-test.js
index 7f0676f..455a372 100644
--- a/test/app-flow-test.js
+++ b/test/app-flow-test.js
@@ -76,7 +76,7 @@ describe('Application flow test', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
@@ -93,7 +93,7 @@ describe('Application flow test', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
@@ -109,7 +109,7 @@ describe('Application flow test', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
diff --git a/test/cloudron-backup-test.js b/test/cloudron-backup-test.js
index 70b3d3a..b056e77 100644
--- a/test/cloudron-backup-test.js
+++ b/test/cloudron-backup-test.js
@@ -77,7 +77,7 @@ describe('Cloudron backup testing', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
@@ -117,7 +117,7 @@ describe('Cloudron backup testing', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
diff --git a/test/cloudron-update-test.js b/test/cloudron-update-test.js
index 0d1adaa..04d0114 100644
--- a/test/cloudron-update-test.js
+++ b/test/cloudron-update-test.js
@@ -92,7 +92,7 @@ describe('Cloudron update testing', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
@@ -112,7 +112,7 @@ describe('Cloudron update testing', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');
@@ -134,7 +134,7 @@ describe('Cloudron update testing', function () {
     });
 
     it('can check the addons', function () {
-        var res = request.post('https://' + location + '-' + box.domain + '/check_addons').end();
+        var res = request.query({ username: owner.username, password: owner.password }).post('https://' + location + '-' + box.domain + '/check_addons').end();
         assert.strictEqual(res.statusCode, 200);
         assert.strictEqual(res.body.mysql, 'OK');
         assert.strictEqual(res.body.postgresql, 'OK');