User doc, controller tests, att dis tests

Updated documentation to describe Users, Groups and Permissions.

Attribute discvery tests were not upated with the new API and so failed,
they are updated.

Controllers have more testing AND now will report bad IDs etc. done for
events and Hosts controllers, more to come.