Great tests in here!  For this one I suggest adding a comment along these lines to elaborate on what login steps are expected to happen:

Attempt to connect with SASL AUTH first, skipping APOP because there was no greeting timestamp.  Successfully auth with USER/PASS and make sure we report that's the one that worked.