Read / Unread

This adds the concept of read/unread for notifications, and then the ability to toggle this through the user api.

I'm not sure though if the placement of tests in acceptance vs endpoint actually makes sense though.
This one's a classic.