rspec + secure variable