Tests for login required with logged-in and not logged-in users; tests for object ownership when GETing urls belonging to other users.  Bugfix for a Vacation-related view permitted GET by the wrong users.
Removed duplicate login url (use 'auth_login' instead) and fixed broken test.
Remove unused import after verifying get_object() throws a 404 when object not found.
Merge pull request #23 from gordon-morehouse/dashboard_tests

Dashboard tests