I think specifically for the mock tests, add a Fail test for each happy-path test (where possible). Usually a 404 response will be a good test. In some places testing forbidden is also relevant (I think). Thoughts?