Authenticate request's params

- Added integration tests
Consider `self.user` in `setUpClass`.