Added new endpoint /_whoami for debugging authentication. Added integration test which checks that a user is authenticated using token authentication. Rearranged initialization of authenticator to support preceeding.
