Make tests use named url patterns, not string literals
Test for hidden users visible only for themselves on users list