Fixed testcases for unauthenticated user. Added some default behavior to
controller in case of user doesn't have access to specific methods.