Fixed user controller specs

Stub needed after adding authorization