Fix tests to handle access control

* Make defaulttoken used by @oauthSkip use an admin user