[antifa]

I'd expect tests to have assertions that all the expected 401/403/404/422 responses actually happen and have the correct response messages.