refactor auth + basemap middleware
makes mock oath server require-able
test auth + basemap middleware
test-runner cleanup