Log out a user if they arrive at AuthorizationsController#new carrying the username of a different user

Fix authorizations controller and app_config specs, require 2048 bit keys.  We're now using config/application.yml.example in the test env.