Is there anyway to test that the SSPI authentication is kicked of atleast?

Sure, require this authorization for a normal text/html file. When that works, mess up the credentials (eg, set the wrong SSPIDomain) and make certain that that doesn't work.