This test checks for API requests that don't include any authentication, i.e., no Token is being passed. It would be nice to have another test that tests for invalid credentials, i.e., pass a Token, but not a valid token. I wonder if that would generate a 401 or a 403? When I was testing manually and having issues with the token that I created a long time ago I was getting 403 errors, not 401 errors.