Testing pow authenticated controllers

Learned something new here. I think I’ve never reused a conn in a test before, at least not in this fashion.