Add 403 tests and user factory

- move factory to factories
- add factory-boy
- add and use UserFactory