Simplify naming to remove "Tx" now that all handlers only have access to transactions anyway, and always use "tx" as the name of the variable representing the SQL transactions (to make it less likely to cause confusion with monetary transactions).
Split out common test infrastructure from security_templates_test, make tests HTTPS, use the http.Client provided by httptest
