COOPR-520: Add mutual auth support

Please review
this is a little confusing, thought the doGet calls elsewhere in the test were using the parent's doGet until I saw this.  Maybe call this something else like doSecureGet