@timurvafin looks like we lost auth_token tests? Maybe we should add a note somewhere that "Application uses token authentication through http header 'X-AUTH-TOKEN'" ?