strongloop/loopback — pull request #689 by bajtos (2014-10-23 11:19:27+00:00)
Title: User: fix `confirm` permissions

Enable authentication for all User unit-tests to ensure the ACLs are
correctly configured.

Fix the rule for `confirm` - the correct permission is `ALLOW`, not
`ACL.ALLOW`.

Fix #677

/cc @raymondfeng @ritch I'll merge the patch without review, the change is trivial while the bug is critical.