Authenticating API Calls by Spoofing Test 2

Did the author userID spoof correctly?