Fix up the tracing test

It has been silently broken from the beginning.
* 'tracing' wasn't included in the list of request middlewares.
* authentication was not taking place during the trace test.
* http server methods were calling assert methods. when these failed outside of the context of the test, we usually get a double callback.
* minor stuff.