move spec helper methods out of Firewall class