changed index test to suit token authentication
fixed logic to show all to owners and not private to others
fixed remaining list specs
added note to add scope spec
added specs to show it handles invalid lists