api/users_controllers spec modifled, implemented controller, green
can be a local variable instead of instance var
skip authorization checking
refactor users api with error method
refactor users_controller with stubbed permissions check
add basic http authentication to api
added a RestClient script
specs pass with stub authentication