Factored out the Authentication part into a separate class so that it can be managed better.
Initial integration test of the controller
JSON Assertions in the Integration test