Assert that the initial authorisation succeeded in functional api_spec

This makes sure the initial authorisation call in the functional spec succeeds before continuing. See #90.

@alloy @rngtng