Huh, do we want to promote mocking "authorized?"? Why not just pass in `no_current_user: true`?