tests/api: using decorator auth override vs new deny api
tests/api: testing throttle through api
tests/throttle: add suffix testing