speed up auth tests

We don't need such a high cost in tests.
extract unauthorized response
extract credential check method
tidy up english
improve variable names