Add update specs!

Add specs and testing for restful API controllers
All of the other restful resources have an 'author' field, Vote's is called 'user' for some reason.