Minor adjustments for testing code coverage
Include authenticator validation in tests
Don't create a "message" in the response automatically

Comment out metadata support for now.
Add remaining tests for zap.authenticate

Test coverage for lib/zap.js is now 100%