cancan, state_machine and controller tests