test to ensure update status only works for logged in user, also test for not updating with exact same params