Cleaned the test-helper a bit by finally updating the users-tests.
Ensured that the `/users/:username` end-point is enforcing the correct rights.