Modify spec to start using permission based authentication for each action