Fix security test to allow 40X and not only 403.
Currently firebase returns 401 Unauthorized.