modified frauds controller spec: test associating user to fraud