These tests previously existed for the cookie-based auth but needed to
be re-implemented following the switch-over to OAuth.