add preview auth test and supporting config

As discussed with @JustinPinner 

CC @guardian/content-api-staff-developers @guardian/contentapi