refactor controller specs to use mocks instead of real model calls