[#47] Admin controllers are authorized; writers cannot publish articles.

Also:

* Improved the tests to take advantage of RSpec's features.
* Some bugfixes
* Added more tests to capture more behaviour of when an article can be
  updated, in what way and by whom.