Fix test case.
Misc fixes.

- Set default cookie encryption to aes.
- Use RuntimeException as Cake\Exception\Exception no longer exists.
- Remove setting cookie base path as now cake itself defaults to app's base.
Added authentication class for JSON Web Token.
Fix authorization header used.