[#1117] Add mocking to user_update auth tests

These tests now run without touching the model.

Also added one extra test case.
[#1117] Move call_auth() into test helpers

Where other auth test modules can use it.

Also add a complete docstring.
[#1117] Check error messages in user_update auth tests