1. This scenario was previously tested for the registration flow, but
   not authentication.