Fix a couple things

- define `user_for_paper_trail` on controllers
- add a couple fixes for api controllers
- specs