require both container and application for setup
added missing test
removed unnecessary singleton: true
no need to cancel the timeout
retrieve the authenticator from the container
injection is done through the application
fixed test
register the standard authorizer on setup
always include port origins in, fixes #84