Unify in a single file all tests checking that access to actions is properly restricted.
Remove a lingering reference to Artist.active.
Add tests ensuring that GET request-based actions follow expected access restrictions.