Finish chapter 9 exercises

Includes one commented out test in the auth pages spec. Fix that.