Remove maxAge from production static files

 - Setting maxAge was causing files not to be served in production;
   leaving unset for now.
 - Simplify test cleanup by deleting test database rather than individual
   models.
 - Add socket permission tests.
Add authenticated w/o authorization case