comments in test should describe intent of the code


it was a bit confusing when I first read it, arguably the tests themselves should describe intent, but this is a quick fix that simply corrects comment in one place and removes it in another.  
If you're going to remove this line, probably worthwhile to add a comment that says

`Unsuccessful logins should receive a 403 NOT AUTHORIZED http error`