Fix the security restrictions

 * allow unauthenticated access to the sword api

 * fix the tests in the user bundle

 * remove the default tests for bundles Core, PLN* - they were failing
and contained nothing of value.