fix spec: move logged_in? from helper to controller