update tests
Inform users that they are/were locked out (bug 856150)
reworking the places that can't be covered by the auth decorator
tests in a passing state