api/auth: fixed tests.