Authentication header tests