cleaning up controller specs, removed authentication and comments