Test for W3C Web Authentication with no token