Integration & controller tests, user authorise