acls tests

Test_api_pull_request_open_user_token exposes, that is not possible to use user token to open a pull request on master:

FAIL: test_api_pull_request_open_user_token (tests.test_pagure_flask_api_fork.PagureFlaskApiForktests): Test the api_pull_request_create method of the flask api with the
        user token - passes
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/vagrant/.virtualenvs/python3-pagure/lib/python3.6/site-packages/mock/mock.py", line 1305, in patched
    return func(*args, **keywargs)
  File "/home/vagrant/devel/tests/test_pagure_flask_api_fork.py", line 2754, in test_api_pull_request_open_user_token
    self.assertEqual(output.status_code, 200)
AssertionError: 401 != 200

====================================================================
After the change a pull request can be opened with user token:

ALL PASSED! CONGRATULATIONS!