Some OCD and some refactorings.
Fixing some bonehead mistakes.
Moved business logic around ensuring we know about an internet identity out of the auth controller and into achiever lib. Altered tests correspondingly to react to behavior and not delegated implementation details (BDD)