Bare bones user auth with full RSpec testing in Rails 3.2