Add a (too simple) test for /auth/:id/apply