Added authorization tests for member and contributor.
Added API test coverage for ACLs.