TODO - test that having a private bin on X url, then visit as anon user and try to claim url (expects to result in *different* url being claimed).