Bug 978455. Add a POST /registration URL.

Also test the authentication in a different "describe" for the tests, as it's
not really possible to test that for each route.

Each route that needs the user to be authenticated can check that the
middleware is installed.
Address PR comments