Use an independent fixture instead of mucking around with the SQLAlchemy objects
Added authorization checks + modified some routes/schema

This probably breaks the client libraries considerably