It removed most of the reduce functions... really not what we wanted

We completely ingnore the user_id param for non admins now. So if someone tries to show somebody elses tickets they will see their own instead.

close and open actions for plain opening and closing the tickets
respond_with so fields are not cleared on invalid update

the custom actions are not strictly restful. But adding a subresource felt like too much overhead and is conceptually hard to grasp (so we destroy the openess of the ticket to close it?).

This controller does too much - so the tests are also getting large and hard to keep track of

Ticket.is_creator_vlidated? now actually fetches the user from the db and returns false if it does not exist.