Invalidate all users by default (need validation to login) closes #66
Improve controller test suite by stubbing authenticate! function where possible