add an Authenticate and InvalidateToken effect intents

and use them instead of some custom FuncIntents in the http code, making the tests a lot nicer.
The attributes in the class all prefix with `_`. Should the above attributes be changed?