    @Test
    public void createGame_BaseAuth_User_Forbidden() {

        List<User> users = webClient
                .get()
                .uri(USERS_URL)
                .headers(basicAuthHeaders(testConfig.getAdminName(), testConfig.getAdminPassword()))
                .retrieve()
                .bodyToFlux(User.class)
                .collect(Collectors.toList())
                .block();
        assertNotNull(users);
        assertTrue(users.size() > 3);
        webTestClient
                .post()
                .uri(GAME_URL)
                .body(BodyInserters.fromObject(createGame(users.get(0), users.get(1))))
                .headers(basicAuthHeaders(testConfig.getUserName(), testConfig.getUserPassword()))
                .exchange()
                .expectStatus().isForbidden();
    }