rename to mock for consistency, add mock user api
add fake session token to use in tests
rename to be api, remove echo as agreed not needed with other tests
remove echo from api
add 401 tests for when not authorised
handler and tests for userApi interaction, add session for integration test