Fix AuthCtrl tests with proper asserts