updated test for Auth-Bearer header plugin to actually test the headers