This isn't actually testing anything anymore -- it would be nice to test the authorization.