fixed up privilege spec, moved all non-integ spec runners into one html file