using shouda and factory girl for sexier testing like the cool kids
authorization spec added
more testing