Get rid of the unnecessary test user mode

If tests just perform a login before running, there's no need for the
debug test user system.
Test we get 403 back from GET /rest/* when not logged in
Remove withOpts