Test with invalid authentication

[phil-davis]

We should know that all the core endpoints implement proper authentication.

Review existing tests (e.g. in apiAuth and apiAuthOcs suites). Enhance the test scenarios so that:

• all endpoints are covered (webDAV, OCS, sharing-comments-tags...) with all actions (GET/PUT/POST/PROPFIND...)
• test with sending no authentication
• test with sending valid UID but no password
• test with sending valid UID but wrong password
• test with sending an invalid UID but the correct password of the user concerned
• test with sending the authentication (UID plus correct password) of another user (to make sure one user cannot access another user's data without proper sharing-permissions)

This came from the big issue #297

[dpakach]

@phil-davis I think we have good enough coverage on these tests. Do you think we can close this now?

[phil-davis]

I agree - closing