Risky test fix

There is some of the "tests" not testing anything(?)

See the last commit
That's why it was using never(). I think there should be an assert on the result of auth().