Update api_controller_test.rb

The tests for check_permission() (and a couple for follow()) are incomplete; they depend on invitation_response(), which has conflicting specs in the design doc.

invitation_response(my_username, my_password, follower_username, boolean): Make sure follower is still in ‘requester’ list. if boolean is true, moves follower_username from ‘requesters’ list to ‘followers’ list. If boolean is false, removes follower_username from ‘requesters’ list

vs

Invitation Response
request type: POST
action: invitation_response
arguments:
myUsername: user’s username
myPassword: user’s password
username: follower’s “username”
reply:
status code - number depends on state
1 - success
-1 - no such username for myUsername
-2 - incorrect password
-3 - user not broadcasting
-4 - no such follower username

i.e. different numbers of parameters.