Might want additional tests to test for:

* Threads don't exist
* Invalid permission (ie don't have the `messages` scope)