Cucumber test for authorization