moved test, and added new test

There's no need to authenticate in this test, because you're not actually accessing the API.
TL;DR: remove this line