Tighten up specs

* specify the noop and blackhole authenticators,
* move the broken authenticator out of lib into spec/helpers,
* group signing specs by success and failure.