More user api tests

Keep H2 DB connections open for Metabase DB / Test DB until JVM shutdown

add a couple of authentication checks on user api endpoints to ensure that unauthentic users are sent 401 responses.

Hide navbar when user isn't logged in

fix previous commit and use :put as desired.  also add a test that non-superuser can't modify password of another user via PUT /api/user/:id/password

when a logout happens we need to listen for the event and clear the state of our top level controller so that the current user is no longer available.  this will also fix a problem where the nav bar was not hiding on logout.

hide nav when logged out

Pluggable Configuration

have `setup-db` function take a kwarg instead of a straight boolean arg, which makes the function call more readable.

Fix Query Test

Conflicts:
	src/metabase/db.clj

lots-of-tests

don't really need to run `lein check` since `lein eastwood` will fail if

project fails to compile

Actually cache creds