Needs admin privilege to create/destroy resources
Add spec for non-admins trying to create/destroy resources
Add spec for non-admins trying to create/destroy node
UserController don't have login action anymore
Change to more readable names for specs