start on authz tests
add groups, clean up at end
create stories
new method createCredentials()
new convenience method search()
flesh out more tests, still failing