Fix tests: assert content before unauthorized access.

The browser content should be asserted before the next failing
request, since the response / content is now cleared before the request.