Return 403 when trying to access api w/o creds
Added FeedsControllerPolicies tests