If we are following testing best practices here, this should be broken up into different methods.

i.e. testAuthorizationHeaderWithInvalidUsernamePassword
testAuthorizationHeaderWithValidUsernamePassword

etc...

Your tests should only test one thing.