make constants more obvious
Use useruris in acllist

Was putting sessions in in testing
ACL REST API tests work

All tests put back except the RO tests as we no longr have a readonly role