Use VCR to avoid hitting the live api in tests

I’ve recorded the tests using a new account set up just for testing. There are still the same 3 failures, but at least the tests no longer hit the live api. I’d suggest that someone with better knowledge of the test goals go through the diffs and ensure that what needs to be tested is still being asserted. Also, once fully green, you may want to re-record the vcr cassettes. Don’t forget to scrub email and password out of the yml files.