update gems
move user api stubbing out so it can be reused
wire up user authenticator middleware and specs
wip start a mediator for listing notifications for a user