Add test to verify unauthorized requests