change user stubbing in integration tests

use a hand-rolled stub instead of a mocha stub
prevent user w/o permission from creating requests
add content requester permission