Removed the admin check from post to users.
Added admin checks to all non-get paths in products.
Removed an uneeded test from user.
Updated the tests in auth.js