reverts changes to assert_not_authorized
Get tests to work, without necessarily understanding why.