We have a number of tests that are labelled as authorization ITs, but actually test various endpoints without authentication. We should go through and identify these poorly named tests and rename them so it's clear that they are actually testing authentication rather than authorization. As a byproduct, when these changes are made, we should identify whether they also correspond to "missing" authorization tests. If there are authorization tests missing, we should create a ticket for this