start adding quests tests

src/controllers/groups.js

@@ -477,6 +477,7 @@ api.questAccept = function(req, res) {
   if (key) {
     if (!shared.content.quests[key]) return res.json(404,{err:'Quest ' + key + ' not found'});
     if (group.quest.key) return res.json(400, {err: 'Party already on a quest (and only have one quest at a time)'});
+    if (!user.items.quests[key]) return res.json(401, {err: "You don't own that quest scroll"});
     group.quest.key = key;
     group.quest.members = {};
     // Invite everyone. true means "accepted", false="rejected", undefined="pending". Once we click "start quest"