Add test for /api/user and clean rbac configuration

Remove firewall on controllers and remove phpunit specific firewall config