Added /whoami and integration test for authorization.

Added new endpoint /whoami for debugging authentication.
Added integration test which checks that a user is authenticated
using token authentication.
Rearranged initialization of authenticator to support preceeding.

Isn't the 404 enough?