oauth2server: resource authorization tests
Signed-off-by: Lars Holm Nielsen <lars.holm.nielsen@cern.ch>