Initial tests for new Authorization hooks

This includes an initial set of tests for the new authorization hooks (read_list, read_detail...). Note that the current Resource class does in fact fail some of these tests. I will be sending a separate pull request with a patch that sufficiently fixes the problem.

I'm open to comment or criticism in my implementation.