improve auth responses, use 401 instead of 403 for unauthenticated requests

bubble-server/src/main/java/bubble/resources/account/AuthResource.java

@@ -567,12 +567,16 @@ public class AuthResource {
     @POST @Path(EP_LOGOUT+"/{id}")
     public Response logoutUserEverywhere(@Context ContainerRequest ctx,
                                          @PathParam("id") String id) {
-        final Account account = optionalUserPrincipal(ctx);
-        if (account == null) return invalid("err.logout.noSession");
-        if (!account.admin()) return forbidden();
+        final Account caller = optionalUserPrincipal(ctx);
+        if (caller == null) return invalid("err.logout.noSession");
         final Account target = accountDAO.findById(id);
-        if (target == null) return notFound(id);
-        sessionDAO.invalidateAllSessions(id);
+        if (target == null) {
+            if (caller.admin()) return notFound(id);
+            return forbidden();
+        } else if (!target.getUuid().equals(caller.getUuid())) {
+            return forbidden();
+        }
+        sessionDAO.invalidateAllSessions(target.getUuid());
         return ok_empty();
     }
 

bubble-server/src/test/resources/models/tests/auth/account_registration.json

@@ -126,7 +126,7 @@
       "session": "user1session",
       "uri": "me/networks/{{networks.[0].uuid}}/tags"
     },
-    "response": { "status": 403 }
+    "response": { "status": 401 }
   },
 
   {

bubble-server/src/test/resources/models/tests/auth/basic_auth.json

@@ -51,7 +51,7 @@
   {
     "comment": "verify cannot read self after logout",
     "request": { "uri": "me" },
-    "response": { "status": 403 }
+    "response": { "status": 401 }
   }
 
 ]

bubble-server/src/test/resources/models/tests/auth/change_admin_password.json

@@ -104,7 +104,7 @@
       "uri": "me",
       "session": "rootSession"
     },
-    "response": { "status": 403 }
+    "response": { "status": 401 }
   },
 
   {

bubble-server/src/test/resources/models/tests/auth/change_password.json

@@ -189,7 +189,7 @@
       "uri": "me"
     },
     "response": {
-      "status": 403
+      "status": 401
     }
   },
 

utils/cobbzilla-wizard

@@ -1 +1 @@
-Subproject commit 1b2c4adef489e38bb3e488bf995db79d50fea138
+Subproject commit 0c698babbbffdbc4be53bc844ceec64fc6f2a981