Merge pull request #689 from strongloop/fix/user-acls

User: fix `confirm` permissions

common/models/user.json

@@ -75,7 +75,7 @@
     {
       "principalType": "ROLE",
       "principalId": "$everyone",
-      "permission": "ACL.ALLOW",
+      "permission": "ALLOW",
       "property": "confirm"
     },
     {

test/user.test.js

@@ -28,6 +28,7 @@ describe('User', function(){
   });
   
   beforeEach(function (done) {
+    app.enableAuth();
     app.use(loopback.token());
     app.use(loopback.rest());
     app.model(User);