TST: simplify the auth test a little
TST: add a test to make sure the current user is the only one that can update
Merge pull request #59 from karissa/api-user-testing

Api user testing