Why skip these tests, rather than just setting `AUTH_USE_SHIB` for the purpose of the tests? As written, these tests only get run sometimes, which leads to the possibility that they'll get inadvertently broken and no one will notice for a while.