fixes #139 - use get_object_acl instead of get_bucket_acl

Fixes #139 by using get_object_acl instead of removed get_bucket_acl.  Also sets up an integration test for the authorization command - at this point only a test that a bogus account id can't be authorized.

I would like to have a successful authorization integration test but would need an account id or email that could be used to grant access but didn't want to hard-code that in or tweak config to add it there.