Testing authorizing on Shares controller actions