current user set-up for the patient user
patient controller specs updated to reflect the authorize method before filter call on certain patient controller actions