Add userId field to message; require auth from /message endpoint
Remove support for noarchive message flag

This was originally a means of keeping test data out of the database,
but it wouldn't otherwise see use.