Refactor ensure_auth to keep spec DRY.
Spec friendships.