test(controller): make tests use authtoken
test(controller): remove calls to client.login

Django's default test client relies on session handling and cookies for
authorization, whereas we rely on token authorization. Essentially, this
tests nothing as it's an unused workflow.