Changed model specs to new Rspec syntax
Added 'require_login' before action to prevent access for non-logged users