added permission specs and changed specs to disallow viewing of users index page to members and users.