Make the response object protected

If extending the ApiContext, which is cool if you want to implement more custom tests on the response object, the response should be protected so it can be accessed from sub-classes.