In case something fails due to this, it's hard to debug it without
knowing the exact auth_token. Fuzzy testing should be done at another
place.

Also move shared pytest fixtures to conftest.py

https://docs.python.org/3/library/random.html#random.choices

Also randomly generate an auth_token now.