Ensure 403 not auth is caught when trying to get a test that does not belong to the user