Fix authenticator, add ACL tests

Signed-off-by: Julien Danjou <julien@danjou.info>