Factory boy in auth tests

Part of #761