Using an echo service will test whether we send the correct headers to an external service, but part of the point of the remote tests is to make sure the client is compatible with the remote auth-server it is being tested against. Does using the actual remote auth-server not work?

If we do have an echo service, we should probably put it on our AWS stack.