tidying tests
only allow editing of items for owning user
very simple definition of admin for securing user list
Support for toys'r'us