enables updates and adds test for success
removed some instance variables in users_controller and replaced with locals.
added authorization code to the api controller and used it in users_controller and tests
added files to ignore
finishing merge