API tests

[cameron-martin]

Decisions to be made:

• Test against the express interface, or test using HTTP?
• Use actual repositories or use in-memory versions?

My current thoughts are express interface and in-memory to make them as fast as possible. I also don't think you lose that much by doing this, except that the repositories need to be tested separately and ultimately use the database.