fix call to Collection.start_harvest

Need to pass request.user to the start_harvest function, not the
request. Also fixed the form submission tests by subsetting on only
collections with url_oai set.