Factory boy in auth tests, refs #761