Spin out authorization tests