RSpec matcher for declarative_authorization