adding rspec for auth on exchanges creation