fixed images_controller_spec (but only for admin), still need to test for negative results as guest/subscriber