Suite passing!
Added initial authorization-specific tests.

Unfortunately, there's still the shortcoming that
``authorized_update_list`` isn't called in the PUT list variant.
Added mostly-new ``Authorization`` docs.
Because FIXME.