split API tests functionally

tests called in frisby after()/afterJSON() blocks now ensure correct order of execution w/o side effects from async calls
added github ribbon
delete only after update is completed
order of async execution fixed
chose more "secure" passwords