Tests for malformed auth tokens