Since we locked down the /approvals endpoint to only be used by the login client, user's don't need to add an approval as it is to get tokens. it is implicit in the flow through user_oauth_approval parameter.
The test user should have the oauth.approvals scope, and then we can implement happy day flow to test.