Refactor to re-use common tests

    - Mainly deny access for anauthenticated users
      and methods not allowed