Test API security

The API security classes are currently left largely untested. This should change, as the security of the application is of course vitally important.

This issue should be resolved by testing the API security package in its entirety.