Allow testing against authenticated endpoints

WIP