add rspec; cleanup Gemfile; remove users_controller; add missing authorization for finishing a league