change negative button test to search for "Unauthorized" being contained in alert string.