Test to ensure we don't allow access to items a user doesn't own.  Fixes #67
Merge pull request #78 from curationexperts/ability_tests

Test to ensure we don't allow access to items a user doesn't own  Fixes #67