Integration tests

[twistedstream]

Once #1 is in place, it should be relatively easy to write a set of integration tests that validate whether or not the desired auth behaviors are in place. Obviously they would initially fail until the module is complete.

[twistedstream]

Initial tests:

• Call http://PROXY/ to validate that API/ content is returned, which is just a test that the reverse proxy is in place
• Call http://PROXY/secure with no JWT and expect a 401
• Call http://PROXY/secure with a bogus or expired JWT and expect a 401
• Obtain a valid JWT and then call http://PROXY/secured with it and expect that API/secure content is returned