Changed status code for logout method to 401 if user was not logged in
Added User tests, should not: create user, logout user with nonexistent token, remove user without privileged permissions