Login response mock handles invalid user/pass correctly.
Login response mock handles token in authorization header correctly.