Fix that `bookmarks#update` spec

Some extra tests for you to fill in if you have any specific behaviour in mind for what bookmarks#update should do with different users logged in than the one that created a bookmark -- eg, should user A be allowed to update user B's bookmarks