Originally I had some test cases around this to make sure the asset is viewable in all 3 conditions (logged in and registered for the course, logged in and not registered, not logged in). I deleted two of them because I didn't think the middleware was really testing them correctly. Now that you have things working, do you want to add back the other two cases?