Add specs testing unauthorized access