Finishes basic specs and controllers, adds auth, starts role based authorization