- return 401 and false for success so that
consumers like gitlab-shell can interpret it
correctly

- also, re-factor base_spec. Move helper methods
into a helper class and re-use in ee/.../base_spec