Moved authorisation middleware before message store middleware so that requests are rejected before their metadata gets stored when not authorised.
Changed messageStore unit test to use ObjectId instead of string (more accurate for actual use).
Merge pull request #107 from jembi/auth-before-msgstore

Moved authorisation middleware before message store middleware