Don't randomly generate auth_token in tests

In case something fails due to this, it's hard to debug it without
knowing the exact auth_token. Fuzzy testing should be done at another
place.