Spec refactor

DRYed out authentication of certain types of users (admin and non-admin) for controller specs