private user routes

[jsvoo]

[cubap]

We need failing tests in this scenario.

It doesn't have to be a "Class Test" that fails, since this is about an available endpoint, but something in the API tests should catch a missing endpoint. The tests on the class do seem to test the class correctly.

[thehabes]

From the perspective of the Class, yes I do think that part is doing OK. The tests start to fail when I go into /classes/User/User.mjs and remove functions.

[jsvoo]