Comment 3 for bug 1464377

In re-reviewing my patch this morning, I noticed I left a bit of sanity-check debugging in the proposed test (the first admin_request() under "Attempting to use the deleted token on v2 should fail" bypasses authentication and therefore makes an unauthenticated request to a privileged v2 resource, thus trivially expecting a 401).

The attached patch removes that extraneous call and makes the neighboring call easier to read by passing `token=v2_token` (instead of manually building headers).

This test isn't functionally different in any relevant way, I just wanted to provide a patch without the above distractions.