Security and Observation api spec testing, controller, and view refactoring.  Modification to fhir_controller authentication to check for valid authentication_expiry