Minor cleanups in API auth unit tests