Fix Improper create statement in ReturnAuthorization, Specs