Request testing

Pulled the helper from #41 so it can be used before that branch lands, and converted the auth tests to use it instead of the fake response