I'm thinking in how do you know that the test fails because ```_start_authentication``` didn't get its salt or for instance, that it got a '422' error or some other ```SRPAuthenticationError```?.
What I mean is that we should use different exceptions for different errors. Or at least if it's important to difference them.