#541 Tests for API authorization
#541

- changes to .ini file to disallow org/group creation by normal user
- adding auth function with @auth_sysadmins_check decorator to block
everyone, including sysadmins from creating group members
- adding new tests and restructuring existing ones
Merge pull request #1054 from OCHA-DAP/api-auth-test

Pull request for : Test for unintended permissions via API #541