Test that lockdown specifically adds authorise

As requested by @thomseddon here:
https://github.com/thomseddon/node-oauth2-server/pull/119#discussion_r20351706