User auth functional tests for the items controller
Typo fix
There's no need to expose the user object to the view here
assert_diff should be assert_no_diff, sign in where necessary
Require auth, check that the user owns an item before destroying it