whoops guess that got missed in the refactor.
this also adds our first functional test! to reproduce the problem
since unit tests didn't catch it. unfortunately i'm still missing
something about how the functional TestApp is supposed to work, in
conjunction with the test DB etc. seems to be acting strangely with
regard to permission checks especially...
