title: Invoke Lambda function without authorization on local serverless-offline environment
body: <p>I am trying to test authorization of a Lambda function using Cognito, Serverless framework &amp; Serverless-Offline plugin.</p>
  
  <p>When I run my stack locally using serverless offline, all requests by default are authorized and I can execute them without a problem.</p>
  
  <p>The command is <code>serverless offline</code></p>
  
  <p>What I <strong><em>cant</em></strong> do is test <strong><em>unauthorized</em></strong> requests locally, when I use the argument <code>--noAuth</code> the request is still authorized by default, which means I can't test scenarios of unauthorized access.</p>
  
  <p>Using <code>serverless offline --noAuth</code></p>
  
  <p>When I am developing locally, how can I test requests against my handler that are unauthorized?</p>
  
  <p>Here is my yml:</p>
  
  <pre><code>service: apples
  
  provider:
    name: aws
    runtime: nodejs8.10
    stage: ${opt:stage, 'dev'}
    region: ap-southeast-2
    profile: personal
  
  plugins:
    - serverless-offline
  
  functions:
    hello:
      handler: handler.hello
      events:
        - http:
            path: users
            method: get          
            cors: true
            authorizer:
              arn: ${cf:apples-auth-dev.CognitoUserPoolArn}
  </code></pre>