Refactor: Auth: ensure methods -> lib

Move all of the 'ensure' methods into their own
module in /lib/auth-ensure.js, as that's where
they want to be.