Add unit tests for Character authorizations

Add unit tests for the following requirement: a user must own (directly or
indirectly) a character to update or delete that character, or to fetch the
update or delete form for that character.