Added permissions tests for API endpoints
Updated permitted values (coordinates)
Updated to rails 4.1 enums
Added API authentication and respective tests