Minor update to test utility to check if the server has actually sent a response before trying to use it, corrects a NullPointerException that was masking real failures.
fix root context test
Don't use the status code of 401 as that is specifically used when sending a challenge to the client, 403 is better suited where the request reaches the resource but we still choose not to fulfil the request.