all this testing allowed me to get rid of one potential security issue, which in turn led to removing some impossible scenarios
MapImagesController specs
[#23]
ignoring _rspec.html