Separating out authN from authZ tests