Add options for message list API
Implement permission check to get messages list
Add specs for Message model

- Fix FactoryBoy usage