More test case cleanup

Improve Gary's more flexible and readable method for verifying Method X
Url combinations and expected status codes
Added failing test for duplicate Contact POSTs
Verify all PUT APIs can update all fields
Remove unnecessary validation of user authentication (auth.py already
fails if user is None before it returns)
Stylistic fixes