Clarify why `test_user_auth`'s `test_user_relogin` is providing both a token and credentials

[portante]

Why are we providing both a Bearer token and username/password? Aren't those redundant credentials? What does this test beyond what we test at line 181?

Originally posted by @webbnh in #3231 (comment)