With controller specs for authenticated user