Auth controller refactoring

https://www.pivotaltracker.com/story/show/64997796
* Refactored `authentications_controller_spec.rb`.
* Moved request specs to controller specs.
* Added more test scenarios to controller specs.