tests: test if user is not authenticated in browse

tests/test_views.py

@@ -224,10 +224,13 @@ def test_sftp_post_fail(client, bucket, remote, user, user2):
 
 def test_sftp_browse(client, remote, user):
     """Test get API call."""
-    login_user(client, user)
     url = url_for('invenio_uploadbyurl.uploadbyurl_api_sftp_browse',
                   remote_server=remote.name)
     resp = client.post(url)
+    assert resp.status_code == 401
+
+    login_user(client, user)
+    resp = client.post(url)
     assert resp.status_code == 200
 
     node = dict(