Use HTTPStatus constants in place of literals in `tests.rest.client.test_auth`.