User must be authenticated to access
controller; updated mocha gem