Add additional tests for OIDC, SAML, and tenant middleware to improve coverage of security-critical paths.