nit, the variable `TEST_WITHOUT_HAWK` has nothing to do with tests, you could turn that on and you lose all Hawk auth in production requests. Suggest something like `SKIP_HAWK_AUTH` or check that you are in the test suite before using the flag.