Expose authenticator's private interface as internal
Itemize imports in test classes
Add authenticator test for token-flow authentication

Relies heavily on mocking. Includes making
authenticator slightly more testable.