fix #2 fix #20 Backend testing framework

- We now have nice infrastructure for unit testing REST endpoints
  and making useful assertions about them.
- Added documentation for how to run and create tests.
- Made password regex validation configuration option.