Fixes #22

Grant new privilege endpoint accepts privilege as a string, not an array.

- Updated tests