respond to /api/contractors/<cagecode> (tests fixed)
see https://github.com/18F/afsmallbiz/issues/52

calls to done() were missing from tests