updates to the sinatra test server

Added a convenience method for verifying LTI launch authenticity and made a change that allows sinatra to load in iframes.