moved more towards Dancer2::Plugin::Auth::Extensible and borrowed their test suite