add a test where the user tries to update a wiki page using a filehandle id they not own (same for create).

Also include the case where one user updates a wiki makrdown with a file handle then a second user adds an attachment filehandle but does not change the markdown file handle of the first caller.  This should not fail.