Tests: tests for auth_request with satisfy. In particular, this adds a TODO test for a case from ticket #285 - if "satisfy any" is used and auth_basic returns 401, it should be used as a response code even if auth_request later returns 403.