Allow a spec / test mode where a _spec_authenticate! method is called on a strategy instead if present Implement back urls