integration: using auth_request to pass Authentication header in create_app

also refactoring create_app tests to use mock assert method instead of
collecting the call arguments manualy.