Don't actually change RACK_ENV during testing
Write some serious CertificateAuthority