Add more failure tests for bearer token authentication.