This is basically testing #authenticate in ApplicationController. We plan on addressing the authentication changes on another branch and probably removing this spec.