filled out most of authorized user spec. should use factory girl to create dummy data