Added tests to see if we can old with old auth key.

Removed some resource tests for that since they are depedent on
if the servlet filter allowed the user to get to them.