Fix posting security and add functional tests

- Fix security config to permit all access to posting resources

- Add functional tests for controllers

- Remove unused imports & correct low priority warnings