This also improves the tests to make sure they're testing what they should, including passing through the feathers built-in authentication mechanism
This also adds some basic test coverage for the authorize hook, which I should have added in the first place. 💩