specs refactoring, blacklisting with before_filter, application.authorize method
route root to 'my events'
add default user