Get specs passing; turn off basic auth in development and test.

From now on I'll pull request from a branch, but this was just basic bootstrapping stuff.