Duplicate authorization? Think that is not necessary..
Why not move the authorization to `setUp` ?