Rename 'Authenticate' to 'Authorize' for accuracy.
Add test for using subclasses of the Authorize constraint