auth: add test case for incorrect auth
auth: add test case for incorrect auth

There was no test case for a token being provided, but incorrect, so if we only
went by the tests it would in theory be possible to get in by just providing a
token without the token needing to be the correct token.

travis-ci/jupiter-brain,travis-ci/jupiter-brain