ALM-272 adapted rspec tests to changed logic
ALM-280 we don't test Devise/Omniauth in rspec
ALM-282 fixed role check in API v3 controller
ALM-288 use webmock for DOI lookup
ALM-280 Omniauth not needed in rspec tests