If authenticated users are supposed to be able to view resources (per the comment), why should we now be getting a 301 for them instead of a 200?  It sounds like they're not be allowed to view the resource, which would mean the code is broken, not the test.