Adding authentication logic to BaseRunner

I want to push this logic into the BaseRunner instead of the
controller as it provides an easier means for avoiding around filter
behavior.
Adding CitationsRunner authentication enforcement
Adding user sign in for feature tests
Adding authentication enforcement to DOIRunners
Adding HeaderRunners requires_authentication