Add requires_auth to iter_notifications.

Add a safety check for the user in iter_pulls.
test_iter_pulls