Fixed bug in hideResource duplicate check.

There was an assignment happening that should have been a comparision.
TDD'ed it--failing test first, then found & fixed the bug.
Improved error message for when the user is not authenticated.

Added a new error type: 'noauth'. This will result in a 403.
Restructured unit tests.

Went back to putting the unit tests under a describe with the method name under test.
This makes it feel way cleaner, and makes it easier to see when you're missing tests
or have duplicates.

Established a standard ordering of test methods:
 1. create
 2. read (get, search, etc)
 3. update
 4. delete (destroy)
 5. other methods