update the authentication gateway to pass the first test
add the second code example for authenticating with the vend api
add a failing test for exchanging the temporary token for an access token