write a simple test that uses an ACL doc an a bearer token

* start with a publicly writable pod
* do HEAD to pod root to determine ACL doc location
* do PUT to create ACL doc, giving only Alice access
* do PUT with a bearer token for Alice, it should succeed
* do PUT with a bearer token for Bob, it should fail