UnShareEnvirionment

Add a new client-side API function, UnShareEnvironment, which denies
the given environment user access to the environment.
Don't we have a test already that says when we add an environment user, we can retrieve them?

We don't need to test the same things in multiple places.