Update authorization_helpers for rspec 3

- and_return with a block doesn't need to call and_return