Backdrop sends Bearer token to Stagecraft

The `/data-sets` endpoint is protected by a shared bearer token.
Backdrop must send it when it requests data set metadata.

Quite a lot of test refactoring.

Related to https://www.pivotaltracker.com/story/show/67103208
[#67103208]