Add authorizations support

TODO: 

* More tests, specifically uncomment the `xit`s
* Work out how the funk persona allows you to arbitarily create authorizations for any user given any token !!!