finish testing the views

Fixes a bug found by the tests -- must pass the user's username to
auth.authenticate, not their email (use get_username).