Add test for authLastResponse nonce check