users can only destroy annotations that they can? :destroy, and only show records that they can? :show
made sure the list of creators, records, terms, and contexts in the annotation_filter is unique
ALL TESTS PASS