Add a test case for downstream auth.