only use user ticket(s) path for real users
adopt ticket list test to new behaviour

We completely ingnore the user_id param for non admins now. So if someone tries to show somebody elses tickets they will see their own instead.