Add some tests for Authority class.

To ensure that a user cannot do anything without declared rules.