remove unneeded cas auth test for boxes controller