Diffs test returns true on 'not authorized'