A well-tested AuthenticationConcern example