Test order authentication.

This code was previously untested.
Authorize an order through cancan.
Integrate API key checking into authenticate_user

It doesn't really do much currently.