Auto authorize spec helper

:fork_and_knife: This adds a `auto_authorize!` spec helper which stubs out actions for a given record authorizer. This reads a lot nicer when you're actually in the specs and having a method that accomplishes this lends for the opportunity to document it!

I also refactored some specs to take advantage of contexts for testing authorized/unauthorized states.