The spec was checking the activity_id of the activities held in notifications
within the controller.

Because the activities are different models, it is possible that they are
created with the same database IDs, and when they are this spec fails because an
activity which should not count as a match is counted as one.

* Add exclude_types param to /api/v1/notifications

* Exclude notification types in web UI through exclude_types in the API