Updates DenyTest for contributor users.

Removes test for browsing and viewing non-public exhibits, since Contributor
users can now see all exhibits.

Adds test to confirm users are forbidden from editing exhibits they did not
create.