Add some specs for the AuthenticationService

This is just a simple wrapper around $http. `login` just transforms the
result so that it returns the user rather than the HTTP response.
Again probably overengineered for what it is.