adding ability specs, authorize_resource controller specs, internalization, some changes